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DETAILED ACTION 

This Office Action is in response to Applicant's amendment filed on 8/16/07 and 
an examiner initiated interview with Himanshu Amin on 10/04/07. 

Examiner Amendment 

An Examiner's Amendment to the record appears below. Should the changes 
and/or additions be unacceptable to Applicant, an amendment may be filed as provided 
by 37 CFR 1 .312. To ensure consideration of such an amendment, it MUST be 
submitted no later than the payment of the Issue Fee. 

The following changes were authorized (and permission to make same by 
Authorization for this Examiner's Amendment was given in a telephone interview with 
Himanshu Amin on 10/04/07). 

Please cancel claims 2, 21, 27-29 and replace claims 1, 3, 6, 16, 22, 26 and 30: 

1 . A computer implemented system that utilizes a processor and that facilitates an 
application to produce a response to an authentication challenge, comprising the 
following computer executable components: 

a learning component that determines anticipated authentication challenges to 
resource requests from applications based upon run-time learning during previous 
resource requests by applications; 

an authentication manager that receives first data associated with the 
communication challenge and processes the first data into second data of a first type 
appropriate for a first authentication module, the authentication manager further 
communicates the second data to at least one authentication module, the authentication 
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manager further communicates the second data to the at least one different 
authentication module if the first module is unable to process the authentication 
challenge, the second data is related to the first data and the authentication challenge, 
the authentication manager also generates one or more pseudo-challenges of its own 
not in response to the authentication challenge and communicates the data associated 
with the pseudo-challenges to at least one authentication module; af*4 

at least one authentication module that receives the second data from the 
authentication manager and produces third data related to responding to the 
authentication challenge ; and 

a cache that stores one or more third data related to responding to the 

authentication challenge and the one or more pseudo-challenges . 

3. The system of claim 1 2, wherein the authentication manager receives a set of 
first data associated with a multipart authentication challenge, to process the set of first 
data into a set of the second data, and communicates the set of second data to at least 
one authentication module, the set of second data is related to the set of first data and 
the multipart authentication challenge. 

6. The system of claim 1 2, wherein: 

the authentication manager accepts a pre-authentication challenge test message 
associated with an anticipated authentication challenge, processes the test message 
into a pre-authentication challenge test data, and communicates the pre-authentication 
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challenge test data to at least one authentication module, the pre-authentication 

challenge test data related to the pre-authentication challenge test message; 

at least one authentication module receives the pre-authentication challenge test data 

from the authentication manager and produces a pre-authentication challenge test 

response data related to responding to the pre-authentication challenge test message; 

and 

the cache stores one or more pre-authentication challenge test response data 
related to responding to the pre-authentication challenge test message, the cache 
selectively provides the pre-authentication challenge test response data upon request 
by the authentication manager. 

16. A computer implemented method that utilizes a processor for enabling an 
application to produce a response to an authentication challenge, comprising: 

anticipating an authentication challenge to a resource request from an application 
based upon run-time machine learning during previous resource requests by 
applications; 

pre-authenticating the resource request by generating and storing an 
authentication response to the anticipated authentication challenge; 

generating a pseudo-challenge not in response to the authentication challenge 
and storing a response to the pseudo-challenge; 

employing a component implemented on a computer readable medium to accept 
the authentication challenge; 

passing a first data associated with the authentication challenge to an 
authentication manager, where the authentication manager processes the first data into 
second data of a first type appropriate for a first authentication module, further where 
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the authentication manager processes the first data into second data of a second type 
appropriate for a second authentication module if the first module is unable to process 
the authentication challenge, the first and second authentication modules having 
different requirements for the second data; 

passing at least one of the second data associated with the authentication 
challenge or pseudo-challenge to one or more authentication modules, where the 
authentication modules are registered with the authentication manager, registering the 
modules includes informing the authentication manager of which system authentication 
challenges the module is capable of processing and where the authentication modules 
are operatively connected to the authentication manager; 

producing one or more responses to the authentication challenge and the pseudo 
challenge; and 

using a cache to store one or more third data related to responding to the 
authentication challenge and the one or more pseudo-challenges . 

22. A computer implemented method that utilizes a processor for enabling an 
application to produce a response to an authentication challenge, comprising: 

generating a pre-authentication challenge test message based upon anticipating 
an authentication challenge to a resource request from an application based upon run- 
time learning during previous resource requests by applications; 

generating a pseudo-challenge message not in response to the authentication 
challenge and storing a response to the pseudo-challenge; 

utilizing a component implemented on a computer readable medium to pass a 
first data associated with the pre-authentication challenge test message to an 
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authentication manager, where the authentication manager processes the first data into 
second data of a first type appropriate for a first authentication module, further where 
the authentication manager processes the first data into second data of a second type 
appropriate for a second authentication module, the first and second authentication 
modules having different requirements for second data; 

passing at least one of the second data associated with the pre-authentication 
challenge test message to an appropriate authentication module, if the module is unable 
to process the challenge passing the at least one of the second data to the at least one 
different authentication module, where the authentication modules are registered with 
the authentication manager, and where the authentication modules are operatively 
connected to the authentication manager; 

producing one or more responses to the pre-authentication challenge test 
message; and 

caching the one or more responses to the pre-authentication challenge test 
message and one or more pseudo-challenges . 

26. A computer readable medium having computer executable instructions operable 
to perform a method comprising: 

generating a pre-authentication challenge test message based upon anticipating 
an authentication challenge to a resource request from an application based upon run- 
time learning during previous resource requests by applications; 

generating a pseudo-challenge not in response to the authentication challenge 
and storing a response to the pseudo-challenge: 
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passing a first data associated with the pre-authentication challenge test 
message to an authentication manager, where the authentication manager processes 
the first data into second data of a first type appropriate for a first authentication module, 
further where the authentication manager processes the first data into second data of a 
second type appropriate for a second authentication module, the first and second 
authentication modules having different requirements for second data; 

employing a component implemented on a computer readable medium to pass at 
least one of the second data associated with' the pre-authentication challenge test 
message to an appropriate authentication module, if the module is unable to process 
the challenge, passing the test message to one or more authentication modules, where 
the authentication modules are registered with the authentication manager, and where 
the authentication modules are operatively connected to the authentication manager; 

producing one or more responses to the pre-authentication challenge test 
message; and 

caching the one or more responses to the pre-authentication challenge test 
message and the one or more pseudo challenges . 



30. A system that utilizes a processor enabling an application to respond to a 
challenge to a request to access a resource addressable by a URI, comprising: 

means for anticipating an authentication challenge to a resource request from an 
application based upon run-time learning during previous resource requests by 
applications; 

means for receiving the challenge, the receiving means separate from the 
application; 

means for processing data associated with the challenge into second data of a 
first type appropriate for a first authentication module and second data of a second type 
appropriate for a second authentication module and distributing at least one of the 
second data to appropriate producing means, if the first producing means is unable to 



Application/Control Number: 09/818,358 Page 8 

Art Unit: 2134 

process the challenge, distributing the at least one of the second data to one or more 
producing means, the distributing means being separate from the application, the first 
and second authentication modules having different requirements for second data , the 
means for processing data generates one or more of its own pseudo challenges not in 
response to the authentication challenge ; 

means for producing a response to the challenge^;]] the producing means being 
separate from the application; a^4 

means for storing a response to the challenge ; and 
means for storing one or more third data related to responding to the 
authentication challenge and the one or more pseudo-challenges . 

Allowable Subject Matter 

In light of applicant's arguments and amendment, claims 1, 3-20, 22-26 and 30 are 
allowed. 

Any comments considered necessary by applicant must be submitted no later than 
the payment of the issue fee and, to avoid processing delays, should preferably 
accompany the issue fee. Such submissions should be clearly labeled "Comments on 
statement of Reasons for Allowance". 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Peter Poltorak whose telephone number is (571) 272- 
3840. The examiner can normally be reached from Monday through Thursday from 
9:00 until 5:00, and every other Friday from 9:00 until 5:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kambiz Zand can be reached on (571 ) 272-381 1 . The fax phone number 
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for the organization where this application or proceeding is assigned is (571) 273-8300. 
Any inquiry of a general nature or relating to the status of this application or proceeding 
should be directed to the Group receptionist whose telephone number is (571 ) 272- 
1600. 
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